Blizzard's internal network compromised.

[zenga]

Another thing I think they should do is require the authenticator after a single bad password attempt.

Why? That account has an authenticator and is not subject to hacks due to a wrong passwor.

[JohnGabriel]

Why? That account has an authenticator and is not subject to hacks due to a wrong passwor.

What about people with siblings, or roommates, or college dorm, or play from work? Don't see any reason to allow somebody lots of attempts to guess your password.

[Khatovar]

What about people with siblings, or roommates, or college dorm, or play from work? Don't see any reason to allow somebody lots of attempts to guess your password.

Use the option to require an authenticator every login and don't leave your authenticator laying around.

[JohnGabriel]

Use the option to require an authenticator every login and don't leave your authenticator laying around.

My bad, you are correct. I completely forgot about that option in my blizzard account.

[MiRai]

Time to change security questions:

http://us.battle.net//wow/en/blog/6968168
http://eu.battle.net//wow/en/blog/5669048

[Iru]

While I appreciate Blizzard's actions, having four of my accounts locked because I share a mobile authenticator across 5 accounts is not my idea of an ideal fix. Especially when I need to reset the mobile authenticator serial number BEFORE I can get into the account on battle.net and remove the mobile authenticator